Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F4C981266C5411F0AAD87E3EC4F9AE02.roa
File:                     F4C981266C5411F0AAD87E3EC4F9AE02.roa (raw, json)
Hash identifier:          G9FhSJj1WbCn9zPA/UEisJBj2djjJbdsi6g98g2mak8=
Subject key identifier:   9F:9B:F5:16:6C:5B:46:ED:D0:DF:BA:28:05:C8:CF:F3:EF:C2:DA:81
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F2C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F4C981266C5411F0AAD87E3EC4F9AE02.roa
Signing time:             Tue 29 Jul 2025 08:20:59 +0000
ROA not before:           Tue 29 Jul 2025 08:20:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154044
IP address blocks:        165.101.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7980 (0x1f2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 29 08:20:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6888846b-4057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:a7:bf:e1:f3:f1:0c:e9:b5:17:8a:d2:c3:
                    9d:ec:8f:01:1c:63:14:bb:b3:09:16:d2:79:bd:d7:
                    e4:89:a2:db:da:b2:33:26:e7:d4:74:95:05:1a:c6:
                    fd:8c:5f:4f:5e:62:f9:9e:40:c3:60:51:2d:9b:ad:
                    dd:79:13:87:7f:38:37:4b:10:10:ec:37:31:7c:dc:
                    d6:c9:a9:98:3c:a5:86:8c:e8:32:8d:29:13:28:32:
                    ef:fa:4a:78:ac:1b:8d:18:2a:4b:94:9c:9d:2b:d3:
                    f9:21:f0:1a:c1:3e:5d:58:e5:10:e4:84:93:e6:c9:
                    fe:c9:8c:73:0c:17:63:0d:2b:a2:94:58:04:af:3a:
                    f4:8c:3d:83:d4:aa:48:12:b6:0e:1c:c2:77:a7:a5:
                    3d:b2:b8:15:9a:ca:1e:b7:9d:ff:a6:57:a9:36:14:
                    39:ad:8d:f3:67:dd:e6:4e:19:64:50:44:5c:85:5b:
                    92:c5:ad:93:6e:1d:61:5c:82:d5:2d:f6:a4:f0:7f:
                    b4:11:a9:6e:e2:a3:f8:f8:a9:cd:b5:8e:2a:6b:cd:
                    b3:86:5c:7c:08:85:58:9b:b5:8d:0f:10:03:35:05:
                    28:d0:7a:a6:46:3e:47:ce:ce:44:45:6f:ab:a3:24:
                    22:d5:f9:43:2a:76:8c:22:e6:25:4c:ae:f6:7c:46:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:F5:16:6C:5B:46:ED:D0:DF:BA:28:05:C8:CF:F3:EF:C2:DA:81
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F4C981266C5411F0AAD87E3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:95:c6:0f:52:b8:4e:ef:64:7c:30:b4:75:06:65:71:7f:4e:
         b9:13:fd:18:bc:23:9f:79:f4:00:f9:52:d4:7c:18:87:39:87:
         f1:1d:93:50:0d:c5:01:79:8f:16:94:93:1e:93:c3:08:54:eb:
         b1:a4:70:c7:ac:3f:21:78:2d:6a:6e:9c:6f:76:cb:dc:a3:43:
         84:6a:bf:77:dc:d3:be:3b:04:12:3f:66:2b:61:63:3c:30:ee:
         79:c5:fe:32:67:ec:3b:28:81:2d:53:3c:3d:36:cd:36:14:d5:
         19:e2:db:c4:f8:39:30:49:1e:68:8a:59:34:4a:91:3b:9c:ab:
         09:e6:1f:07:82:de:ef:70:8a:6b:ad:22:5c:86:1e:56:f1:2c:
         8f:1c:94:73:b8:28:cc:5d:3e:b2:1a:a5:a8:a9:8a:5e:4a:e5:
         d4:8d:31:3b:7c:f2:62:99:11:b7:f6:81:57:c9:5f:bf:a7:46:
         f5:a2:68:c1:7d:af:bc:92:0e:6c:4d:29:9e:08:aa:62:04:a9:
         29:fb:74:d5:4c:e8:cd:57:e3:2a:74:a2:76:15:7c:3c:75:8e:
         c2:63:5b:d9:12:fe:73:f3:3a:57:79:ab:98:f1:ce:92:5a:58:
         a9:ab:45:33:20:16:22:d0:0f:c4:56:b1:f0:1c:17:ea:80:d9:
         1f:f4:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:37 2025 by rpki-client